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Amendments to the Claims 

The listing of claims will replace all prior versions, and listings of claims in the 
application. 

1 . (Currently Amended) A method for limiting access to an electronic 
document[[s]], said method comprising: 

creating a process-driven security policy having a plurality of states, with each of 
the states having a different set of access restrictions; 

associating an identifier to the process-driven security policy; and 

making the identifier available to certain of users or groups of users; 

associating the electronic document with at least one of the states of the process- 
driven security policy to impose access restrictions on an electronic document; and 

changing the state of the process-driven security policy for the electronic 
document automatically based on an event, wherein the changed state is based on a 
transition rule associated with the event . 

2. (Currently Amended) A The method as recited in claim 1, wherein the 
identifier is a classifier. 

3. (Currently Amended) A The method as recited in claim 1, wherein the 
process-driven security policy is provided or part of a document security system. 
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4. (Currently Amended) A The method as recited in claim 1 , wherein said 
method further comprises: 

creating a» the electronic document; and 

assigning the identifier to the created electronic document. 

5. (Currently Amended) A The method as recited in claim 1 , 
wherein the process-driven security policy is provided or part of a document 

security system, and 

wherein said method further comprises: 

creating a plurality of electronic documents; and 

assigning the identifier to each of the created electronic documents. 

6. (Currently Amended) A method for imposing access restrictions on an 
electronic document[[s]], said m e thod comprising: 

providing at least one process-driven security policy from a serv e r machin e to a 
client machine, the process-driven security policy having a plurality of states associated 
therewith; and 

associating the electronic document with at least one of the states of the process- 
driven security policy to impose access restrictions on aft the electronic document, the 
access restrictions being dependent on the at least one of the states of the process-driven 
security polic y; and 
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subsequently changing the state of the process-driven security policy for the 
electronic document automatically based on an event, wherein the changed state is based 
on a transition rule associated with the event . 

7. (Cancelled) 

8. (Currently Amended) A The method as recited in claim 7 6, wherein said 
changing is initiated by the event is a use r-triggered event . 

9. (Currently Amended) A The method as recited in claim 7 6, wherein said 
changing is automatically p e rform e d bas e d on the event[[s]] that occurs at or are is 
received at the client machine. 

10. (Currently Amended) A The method as recited in claim 6, wherein the 
electronic document includes security information, and the security information includes 
at least an indication of the state of the process-driven security policy for the electronic 
document. 

1 1 . (Currently Amended) A The method as recited in claim 6, wherein said 
method is performed on a plurality of documents on a document-by-document basis. 
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12. (Currently Amended) A The method as recited in claim 6, wherein at the 
client machine, each of a plurality of electronic documents are is in one of the states of 
the process-driven security policy. 

13. (Currently Amended) A tangible comput e r r e adabl e m e dium data storage 
device including at least computer program code for imposing access restrictions on an 
electronic document[[s]], said computer readabl e m e dium comprising: 

computer program code for providing at least one process-driven security policy 
from a serv e r machine to a client machine, the process-driven security policy having a 
plurality of states associated therewith; and 

computer program code for associating the electronic document with at least one 
of the states of the process-driven security policy to impose access restrictions on an the 
electronic document, the access restrictions being dependent on the at least one of the 
states of the process-driven security polic y; and 

computer program code for changing the state of the process-driven security 
policy for the electronic document automatically based on an event, wherein the changed 
state is based on a transition rule associated with the event . 

14. (Cancelled) 

15. (Currently Amended) A The computer readable medium data storage 
device as recited in claim 44 13, wherein said comput e r program cod e for changing is 
initiated by the event is a use r- triggered event . 
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16. (Currently Amended) A The computer r e adable m e dium data storage 
device as recited in claim 4-4 13, wherein said computer program cod e for changing is 
automatically p e rform e d bas e d on the event[[s]] that occurs at or are is received at the 
client machine. 

17. (Currently Amended) A The computer readabl e m e dium data storage 
device as recited in claim 13, wherein the electronic document includes security 
information, and the security information includes at least an indication of the state of the 
process-driven security policy for the electronic document. 

18. (Currently Amended) A The computer r e adabl e m e dium data storage 
device as recited in claim 13, wherein the process-driven security policy is imposed on a 
plurality of documents on a document-by-document basis. 

19. (Currently Amended) A The comput e r r e adabl e m e dium data storage 
device as recited in claim 13, wherein at the client machine, each of a plurality of 
electronic documents are is in one of the states of the process-driven security policy. 
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